General

  • Target

    Install_Xfer_OTT_137.exe

  • Size

    8.0MB

  • MD5

    d37e8c8e92d55af5d4eb031d07544238

  • SHA1

    1b8a72704a8a6b871cc90ac6c72155a9f7779c6a

  • SHA256

    d4e1d3f62a1db904d3ab5c776ddcbb39ac74469e5ca3ed723e3dcef89ebcefeb

  • SHA512

    6a3236fb58dfe8fd502e44910f202323c319f12a6f3dca9f0d67b001a70c58a1838efff58c2f48455b6b09084a2aab12bcc523a5837dbbf4f566de9afc118a67

  • SSDEEP

    196608:+E2a9qG01Uk3Go9DT9+ovDJC21i0hVynPu89M+xkKzl:+doR0173GYDT9+mJC21iMVyPmAdzl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • Install_Xfer_OTT_137.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $LOCALAPPDATA/Xfer/Uninstall_OTT.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    4d85954a016da6eba41af38db29369a8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • $_13_/OTT_x64.dll
    .dll windows:6 windows x64 arch:x64

    61d3b4877af4b8670908947d5cd84a7c


    Headers

    Imports

    Exports

    Sections

  • $_57_/rebyter.exe
    .exe windows:6 windows x64 arch:x64

    a69a20b85ef89cc149f2c89737acc996


    Headers

    Imports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/OTT.aaxplugin/Contents/Win32/OTT.aaxplugin
    .dll windows:6 windows x86 arch:x86

    b4e2f1fef8cb71d668d97be196d46db5


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/OTT.aaxplugin/Contents/x64/OTT.aaxplugin
    .dll windows:6 windows x64 arch:x64

    de49250d133e32e6af16efcff25bd4be


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/OTT.aaxplugin/PlugIn.ico
  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/OTT.aaxplugin/desktop.ini
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/OTT.aaxplugin/Contents/Win32/OTT.aaxplugin
    .dll windows:6 windows x86 arch:x86

    b4e2f1fef8cb71d668d97be196d46db5


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/OTT.aaxplugin/Contents/x64/OTT.aaxplugin
    .dll windows:6 windows x64 arch:x64

    de49250d133e32e6af16efcff25bd4be


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/OTT.aaxplugin/PlugIn.ico
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/OTT.aaxplugin/desktop.ini
  • C:/Program Files/Common Files/VST3/OTT.vst3
    .dll windows:6 windows x64 arch:x64

    b9074a380f2607420c99849afbf38b90


    Headers

    Imports

    Exports

    Sections

  • OTT.dll
    .dll windows:6 windows x86 arch:x86

    af2300083eff180114023180ed206d72


    Headers

    Imports

    Exports

    Sections